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1. Introduction 


This document describes the EXOS 302 network processor board. This is a preliminary docu- 
ment which describes what will be included in the initial design. 


2. General Description (Hardware Architecture) 


The EXOS 302 is a microprocessor-controlled adapter which provides an Ethernet connection 
for computers using the VME bus. Architecturally it is compatible with the NX300 network 
software. 


The EXOS 302 operates as a bus master, capable of reading and writing the host memory. 
Coordination between the host and the EXOS 302 is accomplished by the establishment of con- 
trol blocks in host memory, the passing of values via special registers, and interrupts. The 
EXOS 302 operates as a slave to a bus master reading or writing its control registers. 


The architecture is represented in Figure 1. its major features are : 


O INTEL 80286 Microprocessor, 8MHz 
0 INTEL 82586 Ethernet Controller 
- [EEE 802.3 Compliance 10 Base 5 
- ETHERNET V1 and V2 Compatibility 
_ + D-type 15-pin transceiver connector 
512KB or 1MB Local Memory 
32KB or 64KB Local PROM for 80286 firmware 
INTEL 8259A Interrupt Controller 
Dual UART for RS232 port and timer 
Host bus interface : 
- 8- or 16-bit data 
- 24- or 32-bit address 
- Daisy-chained bus request/grant 
- Daisy-chain interrupt structure 
re) EXOS 202 compatibility mode (24-bit address) 
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Figure 1. EXOS 302 Block Diagram 


3. Functional Descriptiom 


3.1. CPU 


The processing element of the EXOS 302 is an Intel 80286 microprocessor. operating at an 8 
MHz clock rate. It is supported by the 82284 clock chip, 82288 bus controller, and 8259A inter- 
rupt controller. 


3.2. Memory Address Space 


In real mode the 80286 has 1Mb of memory space, which is allocated as shown in Figure 2. The 
local memory appears as the lowest 512KB in the memory space. The host memory is mapped ~ 
into the local space, and is limited to a relocatable 128KB. All local I/O devices reside in the 
80286 I/O space (see section 4.1). 

The 82586 can access only the dual-ported local MEMO it can access the complete 512KB. It 
cannot access host memory. . 

In protected mode the 80286 can access beyond 1MB. An additional 512KB is provided at the 
beginning of the second megabyte. The 82586 can also access the additional 512KB. 
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FIGURE 2. Memory Map 
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3.3. Local Memory 
Local memory is two blocks of 512KB of dynamic RAM (total 1MB). The memory is 16 bits 


_wide, and is dual-ported to the 80286 and the 82586. It is not accessible from the host bus. The 


memory has a minimum 1 wait state and maximum 6 wait states for the 82586, with an average 
of 3. It has a minimum of zero wait states and a maximum of 7 for the 80286, with an average of 
1. Wait states above the minimum are caused by memory or refresh cycles-in-progress. CAS- 
before-RAS refresh is used. 


The upper 512KB is accessible only when the 80286 is operating in the protected mode and a 
control bit is set in the EXOS Status Port (see section 4.1.11). 


3.4. EPROM 


Two sockets are provided for up to 64KB of EPROM for the 80286 firmware. EPROMs of 16K, 
32K or 64K bytes can be used (see section 5.2.2). 


3.5. Network Controller 


The network controller performs the Ethernet control functions with minimum aid from the 80286. 
It consists of an Intel 82586 controller and an 8023A Ethernet Serial Interface chip. 


The 80286 and the 82586 communicate via the local memory and the Channel Attention and 
network interrupt signals. Essentially the 80286 provides buffer descriptors for receiving and 
transmitting packets in the local memory, and generates the Channel Attention. Then the 82586 
transmits or receives an Ethernet packet between the network and the local memory, and gen- 
erates an interrupt to the 80286 when the operation is complete. Synchronization between the. 
80286 and the 82586 is maintained by means of the Channel Attention and interrupt. Neither the 
80286 nor the 82586 can be locked out from accessing memory, so care is required in the 
implementation of semaphores. The 82586 documentation from INTEL describes the network 
interface and the 80286/82586 protocol in detail. 


The 82586 reset signal is a latched bit, and is true upon reset, or by control of the 80286 via the 
CPU Control Port. The 82586 should be initialized before enabling the upper memory. Initializa- 
tion data for the 82586 must be set up at memory location OO7FFF6 (system configuration 
pointer) prior to the first assertion of Channel Attention. If the 80586 attempts to fetch the confi- 
guration pointer while the upper memory is enabled, it will fetch from location 017FFF6 (address 
bit 20 is enabled, and address bit 19 is ignored because of the discontinuity in memory between 
512K and 1M). — 


The hardware provides two loopback features for confidence test capability. A bit in the CPU 
Control Port enables loopback through the transceiver interface chip. The 82586 also has facili- 
ties for internal loopback and diagnostics (see Intel documentation). 


3.6. DUART/Timer 


An RS232C serial port for debug purposes and a periodic interrupt timer are provided by a single 
LSI chip, Signetics SCN2681. See section 4.1.1 for details of the implementation. 


Printed September 6. 1989 -2- Edited Mar 3. 1988 


4 


EXOS 302 EXCELAN CONFIDENTIAL 


3.7. Host Interface 


3.7.1. VME Bus Conformity 
EXOS 302 VME bus conformity is : 


A24 MASTER, D(EQ), D16; A24 SLAVE, D(O) 
OR A32 MASTER, D(EO), D16; A24 SLAVE, D(O) 
OR A32 MASTER, D(EO), D16; A32 SLAVE, D(O) 


depending upon jumper configuration. 


The EXOS 302 as a slave responds to two sets of address modifier codes. The slave bus size 
jumper defines which set of codes is valid. These codes are implemented with a PAL, so can 
easily be modified. 


A24 SLAVE : address modifier codes (hex) 39, 3A, 3D, 3E. 
A32 SLAVE : address modifier codes (hex) 09, OA, OD, OE. 


3.7.2. Address Generation 


The EXOS 302 acts as a bus master to transfer data between its memory and the system 
memory over the host bus. The EXOS 302 provides 32 address lines to the host, for a total 
addressable memory space of 4 Gigabytes. However, only 128KB is accessible at a time. The 
lower sixteen bits from the 80286 are concatenated with sixteen bits from a mapping register to 
form the full 32-bit address. Address line 16 from the 80286 selects which of two sixteen-bit 
registers is used (see Figure 3). This provides two 64KB windows, each of which can be placed . 
on any 64KB boundary in the host's address space. The two windows appear as locations 
080000-O8FFFF and 090000-09FFFF to the 80286 (see Figure 2). 


In the 32-bit mode the six address modifier bits, which must be driven by a bus master, are 
derived from an address modifier register which is written by the host (see section 4.2). 


The EXOS 302 can be jumpered to operate as a 24-bit master, which makes it compatible with 
the EXOS 202 host driver and address modifier scheme. The difference from the 32-bit mode, 

besides the number of address bits, is the source of the six address modifier bits. In 202 mode 

the address modifiers are derived from the low six bits of the upper byte of the mapping register 

(see Figure 3). 


Note that the EXOS 302 is HARDWARE-configured as either a 32- or 24-bit master. If config- 
ured for 32-bit. the address modifier is always driven by the addesss modifier register. 24-bit 
memories can be addressed by changing the address modifier register to one valid for 24-bit 
devices. The upper byte of the map register.as. the.address modifier source in this case, since 
the map register is driving sixteen bits of address. 


In 24-bit mode the address modifier from the map register is also driven onto the upper address 
byte (bits 31-24). According to the VME specification, if the address modifier indicates a 24-bit 
address, devices must not decode the upper byte. 


The EXOS 302 can do eight- or sixteen-bit data operations. Bytes are automatically swapped by 
the hardware (high byte with low, low with high) since it is assumed that any memory device will 
present data to the bus in 68000 format. 
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FIGURE 3. EXOS 302 Bus Master Address Generation 


3.7.3. Slave Ports 


Masters on the host bus can access three I/O ports on the EXOS 302. These slave ports are 
used for resetting the board, setting the address modifier register, setting the interrupt vector, 
and reading or writing program-defined status. These ports are compatible with the EXOS 202 
ports, with the addition of the address modifier register. 


The EXOS 302 is able to read and write its own ports, except for the interrupt vector, which is 
accessible only as an interrupt vector. The address modifier register can be written by the 
EXOS 302 under certain circumstances. Before the register is written, its contents are unde- 
fined. If the EXOS 302 does a host bus write cycle, it will likely assert a garbage address modif- 
ier. This will prevent the EXOS 302 slave machine from responding, and the bus will hang (or 
timeout). 


The slave bus size can be configured separately from the master size. This allows both 24-bit, 
both 32-bit, or 24-bit slave with 32-bit master (slave 32 and master 24 is prohibited by the logic). 
This is accomplished by two jumpers (see section 5.2). 


3.7.4. Bus Errors 


The bus error signal is not generated by the EXOS 302, since access is only to registers. The 
only error that can occur is an incorrect data alignment access by the host (double-byte or 
quad-byte). On such an access the EXOS 302 does not generate transfer acknowledge 
(DTACK), and a system bus timeout should occur. The EXOS 302 does monitor the bus error 
when a master, and an error causes the NMI to the 80286. The NMI is enabled via the CPU 
Control Port. 


Signals ACFAIL and SYSFAIL are monitored, and while either is asserted the EXOS 302 bus 
request is inhibited. If the 80286 requests the bus during this time, it is held in wait. 
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3.7.5. Burst Mode 


The EXOS 302 has a burst mode, which is enabled by a jumper (see section 5.3). It holds the 
bus a maximum of 15 microseconds, unless the 80286 stops requesting the bus sooner. This 
allows about 20 cycles. Since the bus will be released regularly, the bus clear signal is not mon- 
itored. Note that this is not a VME BLOCK operation, wherein the slave increments the address 
itself after the first transfer. The EXOS 302 generates an address every cycle. The bus busy 
line is simply held true to avoid arbitration for each cycle. 


Normally, burst mode will not be effective. However, under certain conditions burst mode may 
increase performance. These are, either singly or in combination : if the bus arbiter has a 
request-to-grant latency greater than 200 nanoseconds; if some masters in the system do not 
provide early release of busy, thereby preventing pipelined arbitration; if the EXOS 302 is not at 
the beginning of the grant daisy-chain. 


3.7.6. Interrupts 
The EXOS 302 implements a daisy-chained interrupt structure. All bus interrupts (1-7) are avail- 
able. The interrupt level is selected by a jumper. Three other jumpers are used to decode the 
interrupt acknowledge. See section 5.2. for.jumper configurations. 
The 80286 can issue a host bus interrupt by writing to an internal port (see section 4.1). The 
interrupt request is cleared by the hardware during interrupt acknowledge sequence (ROAK). 


An interrupt to the EXOS 302 from the host is also available. This interrupt is set when one byte 
of data is written to the Comm register in the EXOS 302. See section 4.2. 


3.8. Indicators (LED) 

The EXOS 302 has three red LEDs to indicate operational status; one for network transmit 
activity, one for host bus activity, and one diagnostic LED which is connected to the CPU 
Control Register. Figure 4 shows the position of these LEDs on the board. 
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Figure 4. LED Positions 
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4. Programming 


This section explains the \/O ports which are used to control the operation of the EXOS 302. It 
contains two subsections: one for internal control, and one for host bus. 


4.1.. CPU Internal 1/O 


The 1/0 map is shown below. An (/O device uses some or all the I/O addresses in the range. 
When less than all the space is used, data replicates. Since incomplete decoding is used, the 
entire 1/0 map from 00-FF repeats to 7FFF. 


Note that all the I/O devices are 8-bit except for the CPU Configuration/ Status Port. This 
means that all 1/O addresses are even (except for the upper byte of the Configuration/Status 
Port). For the sake of simplicity, all 1/O devices will be given one wait state. 


A caveat using |1/O: the MOS devices (PIC and DUARTS) require recovery time between 1/O 
commands. Because of the speed of the 80286, NOP’s will be required when accessing these 
devices. The details are described in the appropriate sections of this document. 


Base Width 
Address | Type | in bits 


Function 


DUART (2681) 
reserved 


Channel Attention 
CPU Control Register 

CPU Status Register 

Interrupt Controller (8259A) 
Schedule Interrupt (software) 
Interrupt Host 
Ethernet Address PROM 

Address Mapping Registers 

Local Reset of EXOS 302 

Host data register and interrupt reset 
EXOS 302 Status 

00-FF Repeats to FFFF 


FIGURE 3. 1/O Map 
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4.1.1. DUART (Serial port/timer) (Read/Write at 00h) 


The serial port and timer are implemented using a Signetics SCN2681 Dual Universal Asynchro- 
nous Receiver/Transmitter (!) chip. The chart below shows the connection of the chip to the 
RS232C port and the 8259A. Specific programming information for the chip can be found in the 
Signetics Microprocessor Data Manual (1986). The chip is operated from a 3.6864 MHz crystal. 
The interrupt request is connected to INT2 of the 8259A. Note that the chip is on the upper byte 
of the data bus. Therefore its ports are every other odd address. One NOP is required between 
successive |/O operations to the DUART to satisfy command recovery time. 


2681 
Pin Function 


Receive Data 

Transmit Data 

Clear to Send 

Data Terminal Ready 
Request to.Send 

Data Set Ready 
Counter output to INT2 


4.1.2. Channel Attention ( Write at 88h) 


A write to this port (data is irrelevant) generates a pulse to the Channel Attention input of the 
82586. 


4.1.3. CPU Control Port (Read/Write at 90h) 


The CPU Control Port is a latching register used by the 80286 for internal control of the 
EXOS 302. All bits are set to zero at power up or reset by the host. The port can be written 
and read at |/O address 90, and is defined as follows: 


Reset 82586 network controller 
Enable 82586 network controller | 
Enable loopback mode of 8023 serial I/F | 
Enable normal mode of 8023 serial |’F 
Disable NMI (bus parity error/timeout) 
Enable NMI ~ “efoeuts 
Light diagnostic LED 
Extinguish diagnostic LED 

not used 

not used 

not used 
Diagnostic bus control (see section 5.2.3) 
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A 16-bit 1/O port at address 98 is assigned to configuration jumpers and other status bits. These 


bits are defined as follows: 


not used 
not used 


not used 
not used 
CPU Clock (1=8MHz; 0=n/a) 


NO Oh WDM — © 


Disable CRS check (=0) 
Ethernet/no SQE test (=0) 


reserved 
reserved 
reserved 
NX Console (=0) 
Debugger (=0) 


Xcevr + 12V fuse (O=blown; 1=o0k) 


Bus error (O=parity; 1=spurious) 
Mem size (1=512KB; 0=1MB) 


Boot (O=from net; 1= wait for host) 


All jumper inputs are pulled up (=1). An installed jumper is read as a zero (=0). 


4.1.5. Interrupt Controller (PIC) (Read/Write at AOh) 


The 8259A Interrupt Controller provides prioritized interrupts to the 80286. Refer to Intel litera- 


- ture for operation and description of its !/O registers. 


Note that due to timing constraints 


(Intel's - not ours), one no-op is required between successive identical commands, and two no- 
ops are required between successive dissimilar commands. This is required to satisfy the chip's 
command recovery time. Since the 8259A is a byte device, it uses even addresses AOh & A2h. 


Interrupt sources are listed below. 


Source 


reserved 
Host Data Register/nterrupt 
2681 Output OP3 (Timer) | 
82586 
2681 Interrupt (SIO) 


Scheduling Int 
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4.1.6. Scheduling Interrupt (Write at BOh) 
An access to this port (data is irrelevant) generates an interrupt on INT6 of the 8259A. 


4.1.7. EXOS 302 Interrupt (Write at B8h) 


A write to this port (data is irrelevant) generates the EXOS 302 interrupt to the host. It also sets 
a status bit which appears in the EXOS 302 Status port for the host. The interrupt is cleared by 
a reset or interrupt acknowledge. The status bit is cleared by reset or by command from the 
host (see section 4.2). 


4.1.8. Ethernet Address PROM (Read At CO-DF) 


The address PROM contains the Ethernet address and other configuration information. Sixteen 
bytes are available for use (even addresses only). A possible format is illustrated below: 


PROM rev level 

Byte 5 of address 
Byte 4 of address 
Byte 3 of address 
Byte 2 of address 


Byte 1 of address 
Byte 0 of address 
Product type 
Hardware rev level 


reserved 
Checksum 


The product type for the EXOS 302 is 12 (decimal). The checksum is formed by summing all the 
bytes modulo 256 and exclusive or'ing with 55. This procedure ensures that a PROM with all 
zeros or all ones will not have a correct checksum. 


4.1.9. Extended Address Map Registers (Write at EOh) 


Accesses to the host use 24 or 32 addresses, of which the lower 16 come from the 80286. The 
upper 16 are provided from one of two 16-bit mapping registers. 


When host bus accesses are performed (addresses 8000-9FFF), address line 16 from tne 80286 
selects which register is concatenated with the lower 16 addresses. The mapping registers are 
loaded by writing data at 1/O locations EO and E2. The write data must be 16 bits wide. The 
lower byte furnishes host address bits"16*23. The upper byte furnishes bits 24-31 if in 32-bit- 
address mode. If jumpered for EXOS 202 compatibility, the upper byte furnishes address 
modifier bits 0-5 (register bit 8= address modifier bit 0). 


egister | CPU Addresses Mode 15-8 
— 8000-8FFF | 32-bit A31-24 rer a 
9000-9FFF EXOS202 | AM5-0 | A23-16 
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4.1.10. Host Data Register and Interrupt Reset (Read at E8h) 
A read of this port acquires the byte written into Port B when the host set the interrupt to the 


- EXOS 302. Reading this port clears the interrupt to the 8259A, and clears status bit 3 of Port B. 


4.1.11. Local Reset of EXOS 302 (Write at E8h) 


A write to this port (data is irrelevant) generates the board reset. This is equivalent to a host 
reset, and resets the entire board. The 80286 returns to real mode. .. ; 


4.1.12. EXOS 302 Status Bytes 0 and1 = (Write at FOQh, Read as Ports A and B) 


A 16-bit write-only register at location FOh is available to provide status information to the host 
Ports A and B. All bits are software-definable. (Current definition of the status bits is explained 
in the Host Interface section.) However, bits 1 and 3 of Port B do not come from this register. 
They are derived directly from the hardware, and indicate the state of the EXOS 302 interrupt 
and the host interrupt, respectively. Reset clears bits 0-7; bits 8-15 are not cleared. 


Bit 1 of the write-only register is used internally to enable the upper 512KB RAM when the 
80286 is operated in the protected: mode. ‘This: inhibits. access to the upper-RAM. When the bit 
is set, access is enabled. The bit should be set AFTER the 80286 is in protected mode, because 
the extended address bits from the 80286 in real mode are not in a defined state, and may 
cause faulty memory operation. 


0 Port B 0=diagnostic failed; 1=passed 

1 Memory Control |} 0=disable upper 512K; 1=enable 
2 Port B 

3 no connect 

4 Port B none 

5 Port B none 

6 Port B 0=loopback passed; 1= failed 

7 Port B none 


1 
— 
o1 


Port A none 


Bit 3 is not connected to anything internally. Bits 8-15 are all wired directly to Port A. This 
register must always be written as a word register; byte operations will trash the other byte. 
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4.2. Host Slave Ports 


Three ports exist on the EXOS 302 in the host memory-mapped |/O space. Two are for status 
and control information to/from the EXOS 302. The third is for the host to write the 6-bit address 
modifier for 32-bit address. mode. 


There are individual compare jumpers for address bits 31-16, and two jumpers to define one of 
four combinations for bits 15-7. These four combinations are programmed into a PAL, and 
currently are compatible with the EXOS 202 rev F. The slave address configuration is shown 
below. (This is a program representation - bit 0 does not appear on the VMEbus.) Bits 31-24 are 
not decoded when in 24-bit slave mode. Bits 6-3 are not decoded, leaving a 128-byte hole 
above the base address. These ports must be accessed as byte values. 


31 24 9.23 ne: Wo, 4: 8 7 0 
aaaaaaaa | aaaaaaaa | bbbbbbbb | _ b--- -ppp 


Base 
ee Type eunchoa 


Read Status Byte 1 
(extended status) 
EXOS 302 Reset 
Read Status Byte 0 
Host Interrupt/Data Write 
Write Address Modifier Register 


Write Port A Generates a hardware reset of the EXOS 302. 


Read PortA Reads the EXOS 302 Status Byte 1 (extended status). All bits are register bits, 
and can be set by the EXOS 302 firmware. Contents are indeterminate after 
reset. See section 4.1. 


Write Port B _- Host Interrupt/Data - Interrupts the 80286 via INT1 of the 8259A and writes a 
byte into the Host Data Register. This also sets the host interrupt status bit, 
which is available to the host in the EXOS 302 Status port. The bit is cleared 
when the 80286 reads the Host Interrupt/Data Port. This mechanism provides 
for handshaking and parameter passing between the EXOS 302 and the host. 
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Read PortB Reads the EXOS 302 Status Byte 0. All the bits are cleared by reset, except bit 
3, which is set. All bits are register bits which can-be set by the EXOS 302 
firmware, except bits 1 and 3, which are interrupt status bits (see section 4.1). 


Bit O Set/reset by EXOS 302 firmware. This bit has previously been defined 


Bit 1 


Bit 3 


Bit 6 


as Status of the board. When reset, indicates the on-board diagnostic 
has failed or is not completed yet. 


Host Interrupt Status - this bit is set by the hardware when the 80286 


issues an interrupt to the host. It is cleared by the hardware during the 
interrupt acknowledge sequence. 


Local Interrupt Status - is set when the host writes into Port B, and is 
cleared when the 80286 reads the Host Data Port. On power reset the 
state of this bit is undefined. Therefore, the 80286 should read the 
Host Data Port before enabling interrupts. 


Set/reset by EXOS 302 firmware. This bit has previously been defined 
as a qualifer of bit 0. When set, indicates a failure of net loopback. 


Write Pot C A byte is written into the address modifier register in the EXOS 302. Only the 
low six bits are valid. This register drives the six address modifier bits during a 
bus cycle if the master size is jumpered for 32 bits. 
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5. Board Configuration 


5.1. Memory Option 


An additional 512KB of memory may be installed in sockets U16-U19. The memory size jumper 
in the CPU Status Register must agree with the installed size. The chips must be 256K X 4 
DRAMS, 120ns or faster, with CAS-before-RAS refresh capability (TOSHIBA 514256 or 
equivalent). 


5.2. Jumpers 


5.2.1. CPU Status Register Jumpers 


All jumper inputs are pulled up (1). An installed jumper is read as zero (0). Note that these are 
only sense jumpers, and have no affect on the hardware, except J3 and J10. 


Mem size (1=512K; 0=1MB) 
reserved ( 
reserved ( 
286 Clock (1=8MHz; 0=n/a) 
Disable CRS check (=0° 


V1 ethernet/no SQE test (=0) 
Net Boot (=0) 
reserved (= 
reserved (= 
reserved (= 
NX Console (= 
Debugger {=0) 


1) 
1) 
1) 
0) 


5.2.2. PROM Size 
Two jumpers define the size of the PROMs used for the 80286 firmware. 


5.2.3. Burst Mode Enable 
This jumper enables or disables the burst mode to the host bus. 


> 
' Burst 


| Function 
Enabled 
Disabled 
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5.2.4. Address Configuration Jumpers 


There are two sets of address jumpers to configure : one for selecting the host bus address 
width (24 or 32 bits) for slave and/or master mode, and one for slave mode decode. 


5.2.4.1. Host Address Bus Width 


The host address bus width determines how many bits are decoded on a slave cycle, and the 
source of the address modifier on a master cycle. Master and slave mode can use different 
widths. Note that the master mode cannot be smaller than the slave. However, if the address 
modifier register contains a 24-bit modifier, then only 24-bit slaves can respond. 


5.2.4.2. Slave Address Compare 


There are individual compare jumpers for address bits 31-16, and two jumpers to define the 
base within 64KB (bits 15-7). The two jumpers select one of four bases which are programmed 
into the decode PAL. 


The corresponding addresses/jumpers are shown in the two charts below. For the address com- 
pare jumpers, an installed jumper is a compare to zero. The four base addresses are compati- 
ble with the EXOS202 (rev F). Bits 6-3 are not decoded, leaving a 128-byte hole above the 
base address. 


Host Address Bits : 
A | 3130 29 28 27 26 25 24 | 23222120 19181716 | 15-8 


J | 26 27 2829 3031 3233 | 3435 36 37 38394041 | | 42 
Slave Address Compare Jumpers 


| 00 | | ! 
[ 7F | g0 | OFF | ON | 
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5.2.5. Interrupt Level and Level Enable 


The request jumper and the acknowledge jumpers MUST match for interrupt operation. An 
installed jumper is indicated by a 1. : 


IRQ Request 
Level Jumper 


Acknowledge Jumpers 
J54 J55 J56 


0 


1 
1 
0 
0 
1 
1 


5.2.6.. Bus Request/Grant In/Grant Out 


Request and grant jumpers must be on the same level. One Request jumper is used. One 
Grant In and one Grant Out are jumpered to match the request level. The other three Grant Out 
lines must be jumpered to daisy-chain the unused Grant In lines back to their respective Grant ~ 
Out lines. 


Request Grant In/Out Jumpers 
Level |} Jumper J68 J67 J66 J65 J64 


0 J60 


J59 
J58 
J57 


5.2.7. Host Bus Ethernet Connection 


The Ethernet signals connected to the 15-pin D-type connector can be jumpered to the host bus 
on P2. All jumpers must be installed if used. The —12V is fused (VE- 12V). 


Sianal | Jumper | Host Pin 
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5.2.8. Dynamic Address Bus Control (Diagnostic only) 


vgengy The diagnostic jumper J44 is to be used only in the factory with special test equipment which 
i can short the jumper upon command. The jumper, when shorted, allows the firmware to force 
the board from 24-bit mode into 32-bit mode by setting the DIAG24 bit in the CPU Control 
Register. This is necessary for testing the address modifier register, since testing will involve 
using invalid modifiers, and an invalid modifier will prevent subsequent slave cycles. Testing is 
accomplished by 1) forcing 24-bit mode to use address modifier from the map register, 2) writing 
the address modifier register with a test value, 3) switching back to 32-bit mode to use the 
address modifier register, 4) doing a bus cycle, which is latched in the bus tester, and 5) reading 
the latched address modifier value from the bus tester. The master jumper is pulled up, and, if 
off, indicates 32-bit mode. The master will follow the slave if the Master jumper is on. This cir- 
cuit is shown below. Note that the DIAG24 and SLAVE24 signals are low true, and MASTER32 
is high true. The gate is a positive AND. Note that this process cannot force the board into 32- 
bit mode if the slave jumper is set for 24-bit mode. 


The DIAG24 bit is O after reset. The CPU Control Register is a write/read register. However, 
the DIAG24 bit (7) is not read directly. The bit which is read is an AND of the DIAG24 bit and 
the DIAG jumper. 


“ Pullup 
+----- + | t+----- + : 
| WRT { ‘DIAG24- J45 } | READ | . 
| REG +----------- 0 O--+--+------ + REG | 
| b7 | | fs - S627 4] 
t----- + | t----- + 
Fa ‘ 
st a | | ‘i | 
ae | +----| \ SLAVE24- | MASTER32 
ms J46 | BUS24- | AND|----------- 0 O-+--------- 
PSO) Ue aha nS Sees | / J44 
| pemreny 


GND 
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6. Connectors 


6.1. VME Bus Connectors 


The following table shows the EXOS 302 signal assignments for the VME host bus connectors 
P1 and P2. Signals not used by the EXOS 302 are designated n/u. Many of the pins on P2 are 
not dedicated to any bus signals. 


Pra enemy renee ouaemnronanannnnsananaronranananatporenaenerenraresemranennamenensnmeesnnan ee oneene inner ree enpee nn Cn eee pane neat Renae S SCA NR] 


VDOO VBSY- VD08 +5V 

vbo1 BCLR- n/u VDog GND 

vD02 ACFAIL- VD10 

VDO3 VBGOIN- VD11 VA24 

VD04 VBGOOUT- VD12 VA25 

VDO5 VBG1IN- VD13 | VA26 

VD06 VBG10UT- VD14: VA27 

VDO7 VBG2IN- VD15 VA28 

GND VBG20UT- GND VA29 

SYSCLK n/u | VBG3IN- SYSFAIL- VA30 

GND VBG30UT- VBERR- VA31 

VDS1- VBRO- SYSRESET- GND 

VDSO- VBR1- LWORD- VTRMT+ | +5V VCLSN+ 
VWRITE- VBR2- VAM5 VTRMT- | D16n/u | VCLSN- 
GND VBR3- VA23 VRECV+ | D17n/u | VGND 
VDTACK- VAMO VA22 VRECV- | D18n/u | VE-12V 
GND VAM1 VA21 D19 n/u 

VAS VAM2 VA20 D20 niu 

GND VAM3 VA19 D21 n/u 

IACK- GND VA18 D22 niu 

IACKIN- SERCLK niu | VA17 D23 niu 

[ACKOUT- SERDAT niu | VA16 GND 

VAM5 | GND VA15 D24 n/u 

VA07 IRQ7- VA14 D25 niu | 
VAO6 | IRQ6- | VAIZ | D26 niu | | 
VA05 IRQS- | VA12 | 027 nvu | 
VA04 IRQ4- VA11 | D28 n/u | 
VA03 IRQ3- | VA10 D29 niu | 
VA02 IRG2+. > ures WAOS? * D30 niu 

VAO1 IRQ1- VAO8 D31 n/u 

-12v +5V STBY n/u | +12V GND 

~5y +5V ~5V | +5V 


Drintan Gantamhar AR 1QRQ 


pate 
~ 


Edited Mar 9. 1988 


EXOS 302 EXCELAN CONFIDENTIAL 


6.1.1. ETHERNET Connector 


The ETHERNET connector P3 is a 15-pin D-type. The following table gives the pin assign- 
ments. ae 


1 
2 
3 
4 
5 
6 
7 
8 
9 

10 

14 

12 

13 

14 

1S 
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6.1.2. SERIAL PORT HEADER 


_ The following diagrams show the pin orientation and signal assignments for P4, the serial port 
header. 


Top edge of board, IC side 


Pin 25 23 
Nos. > 26 24 
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SHeader: c:/nx6/s_net/net586/RCS/net586 2.asm 1.3.1.1 91/03/07 10:21:10 karlt Exp Locker: karlt 
$Project: NX6 §$ 

SCreator: Steve Grau §$ 

SLocker: karlt §$ 


SSource: c:/nx6/s_net/net586/RCS/net586 2.asm $ 


(C) Copyright 1988 by Excelan Inc. All Rights Reserved 


This software is furnished under contract and may be used and copied 
only in accordance with the terms of such contract and with the 
inclusion of the above copyright notice. This software or any other 
copies thereof may not be provided or otherwise made available to 

any other person. No title to and ownership of the software is hereby 
transferred. 


SAbstract: 
NX6 Intel 82586 Ethernet Controller Driver. 


This module contains the transmitter state machines. 


SImplementation Notes: 


The 82586 transmitter driver is implemented using four state machines 
to manage the transmit queues and keep the 82586 running at maximum 
throughput. 


Transmitter Queues 


The transmitter contains two queues. The first queue is made up of a circular 
list of transmit command blocks (CBLS) and a circular list of transmit buffer 
descriptors (TBDs). These structures (CBLs and TBDs) are described in 

detail in the 82586 data sheet. The two circular lists do not necessarily 
contain the same number of elements. Fragmentation of transmit buffers 
requires several TBDs per CBL. So the TBD list should be much longer than 

the CBL list. The actual sizes of these lists is configurable at assembly 
time. This queue will be referred to as the Transmit Ring. 


The second queue is simply a linked list which is used to hold user requests 
when there is a resource limitation in the first queue (out of CBLs or out 
of TBDs, or both). This queue will be referred to as the Wait Queue. 
Transmitter State Machines 


There are four transmitter state machines. They are: 


Enqueue Transmit - (entry points qtx_????) 


¢ ‘3 


Handles queing user transmit requests to the appropriate 
transmit queue. Also, starts the 82586 transmitting if 
it is not already doing so. 


Transmit Complete - (entry points cx_????) 


Process 


Transmit 


In addition to t 
that runs of ac 


$ 


SLog: net586 2 
Revision 1.3.1.1 
temporary fix fo 


Revision 1.3 89 
Added new TPS st 


Revision 1.2 88 
added support fo 


Revision 1.1 88 
Initial revision 


SEndLog$ 


include nx6.ince 

include cfgxxx_x 
include cfg_x.in 
include intxxx_x 


Runs on the command complete interrupt, CX bit in the 
82586 interrupt status. Notifies, the user when each 
transmit completes and frees up the CBL and TBDs used 
by the transmit. 


Wait Queue - (entry points pwq_????) 


Transfers transmit requests from the wait queue to the 
transmit ring as ring resources become available. Is 
run on the same interrupt as the transmit complete 
state machine immediately after it finishes. 


ter Not Active - (entry points cna_????) 


Restarts the 82586 transmitter when it completes a chain 

of transmit requests. All requests waiting in the transmit 
ring are forwarded to the 82586. Gets invoked by the 
command not active (CNA) interrupt from the 82586. 


he state machines there is also a transmit timeout interrupt 
lock interrupt. 


-asm §$ 
91/03/07 10:21:10 karlt 
r APPLLO’s transmit hang problem 


/02/22 09:04:49 steveg 
atus bit. 


/12/09 15:57:31 dauber 
r concurrent link level 


/08/23 08:40:13 steveg 


einc 
c 
einc 


include net586.inc 


-186 


_TEXT 


SEGMENT 


EXTRN 
EXTRN 
EXTRN 
EXTRN 


public 
public 
public 
public 
public 
public 
public 
public 
public 
public 
public 
public 
public 
public 
public 


net586 qtx_return:NEAR 
het586- cna_return:NEAR 
net586 cx _return:NEAR 
net586 pwq_ return:NEAR 


qtx state machine return pt. 
cna state machine return pt. 
cx state machine return pt. 

pwq state machine return pt. 


me 6M 6M ONO 


cx_state 
cna_state 
pwq_state 
qtx_state 
p_ist_586 cbl 
p_ist rdy cbl 
p_last_ rdy _cbl 
p_ist_free_cbl 
p_ist_tx_wait 
p_last_tx_wait 
p_ist_free thd 
p_last free thd 
last_tbs off 
last_tbs_ sel 
fragment count 


PRR RRR EKER KEK K EK KKK KEKE KKK KEKE KEKE KEE KERR KER KEKE KE KEKK KEKE KK KEKE KEKE KERKEKKREKEKEKRKKKEKE 


; net586 tx chain - return transmit buffer chain 


° 
, 


; This 


function returns the TPS and TBS structures that have been queued 


; to the driver. The transmit is turned off. 


° 
t 


=e 


=e 


=e “Oe 6M Me OM 


Inputs: none 


Outputs: STACK_USER_ES:STACK_SI points to TPS chain 
STACK SI = ffff if none returned 
STACK AX = 0 


The TPS chain is linked by the QUEUE field. The end of the chain 
is marked by an offset of ffff. 


KEKKKKEKEKKEKKEREKERKEKEREKEEREEKRRREREKERRKREKRRKRKREKRERKEKRKEKEEEREKKEEKRKEKKEKKEKREKKEKEK 


PUBLIC net586 tx chain 


net586 tx chain PROC NEAR 


me 


pushf 
cli 


protect 


; Disable transmit timeout. 


mov tx_timeout_enable,0 disable the timeout 


me 


; Abort the transmitter. 


mov ex,O0ffffh long timeout 


me 


txc_wait_cmd: 


cmp scb.SCB_COMMAND,0O 3; command clear? 
je txc_cmd_clear 7; yes 
loop txc_wait_cmd 


txc_cmd_clear: 


abort the transmitter 
bang on the 586 


mov scb.SCB_COMMAND,SCB_CUC_ABORT 
CHANNEL ATTENTION 


me 6M 


mov si,Offffh ; assume no buffers 
“mov  - WORD PTR [bp+STACK SI],si 


; Check to see if there are any tps’s on the tps wait queue. 


cmp pwq_state,OFFSET pwq wait ; tps wait queue active? 
jne txc_tx_wait done 


; Get the pointer to first waiting tps. 


mov ax,p_lst_tx_wait 3; get the offset 

mov [bp+STACK_SI],ax 

mov ax,p_lst_tx_wait+2 ; get selector 

mov [bp+STACK_USER_ES],ax 

mov si,p last tx wait 7 get pointer to last waiter 
mov es,p last _tx_wait+2 


txc_tx_wait_done: 


; Check to see if there are any tps’s queued to the 82586. 


cmp cna_state,OFFSET cna_idle ; 586 transmitting? 
je txc_tps done 7 no 

; Free up the thds. 
mov bx,OFFSET thd list 7 point anywhere in list 
mov p_last free tbd,bx 3; this one is last... 
mov bx, [bx].TBD_ LINK 7 --next one is first 
mov p_ist_free tbd,bx 


; Shuffle through the cbls linking tps’s together. 
mov bx,p_ lst 586 cbl # get pointer to first cbl 


txce_cbl loop: 


cmp bx,p_lst_ free cbl 3; all cbhls done? 

je txc_tps done 7 yes 

cmp p_ist_free _cbhl,OFFSET p lst free cbl ; any free? 

jne txc_some_free 7; yes 

mov p_lst_free cbl,bx 3; make this the first free one 


txc_some_ free: 


cmp si,Offffh 
jne txc_got_some 


any on the return list? 
yes 


me 6M 


; The return chain is empty. Attach the first element. 


les si,DWORD PTR [(bx].CBL_TPS OFF 7 get pointer 

mov [bp+STACK SI],si ; write return value 
mov {bp+STACK_USER_ES],es 

mov es:(si]).TPS QUEUE,Offffh 3; mark end of list 
mov bx, [bx].CBL_LINK 7 get next CBL 

jmp txc_cbl_ loop 3; loop through them 


txc_got_some: 


; Link the TPS attached to the CBL to the end of the chain. 
r k 


mov 
mov 
mov 
mov 


ax, [bx].CBL_TPS_OFF 
es:(si].TPS QUEUE,ax 
ax, [bx].CBL_TPS SEL 
es:([si].TPS QUEUE+2,ax 


get offset 
link to previous TPS 
get selector 


me 6 6M 


; Load pointer to this TPS. 


les 
mov 


mov 
jmp 


txc_tps_ done: 


mov 
mov 


mov 
mov 


load it 
mark end of list 


si,DWORD PTR [bx].CBL TPS OFF 
es:(si].TPS QUEUE,Offffh 


=e 06M 


bx, [bx].CBL_ LINK 
txc_cbl_loop 


get next CBL 
loop through them 


me 6M 


p_lst_rdy_cbl,OFFSET p lst_rdy_ cbl ; invalidate pointers 
p_last_rdy cbl,OFFSET p last _rdy cbl 


ax,p_ist_free_ cbl 7 set lst 586 cbhl pointer 
p_ist_586 cbl,ax 


; Set new states. 


mov 
mov 
mov 
mov 


popf 
mov 
ret 


qtx_state,OFFSET qtx idle 
cx_state,OFFSET cx_ idle 

pwq_state,OFFSET pwq idle 
cna _ state,OFFSET cna_idle 


; restore interrupt state 
7 


WORD PTR [bpt+STACK_AX],0 no error 


net586 tx_chain ENDP 


a i i a it en | 


ak i i, i i, i il Si el nS i. nT 


me 


a i i al I 
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Enqueue transmit state machine - qtx_???? 
This state machine is made up of 3 states. 


1. qtx_idle - transmitter is currently idle. 


The request is processed immediately and handed directly 

to the 82586 for transmission. This is the initial state 
of this state machine. This state is entered from qtx_ring 
when all pending user transmits requests are completed 
which is detected in cna_none_queued. 


2. qtx_ring - new transmits are being queued into transmit ring. 


This is the current state when the 82586 is busy transmitting 
a previous request and there are no requests in the wait 
queue. States qtx_idle and pwq_wait are responsible for 
activating this state. 


3. qtx_wait - new transmits are being queued into the wait queue. 


This is the current state when the transmit ring has 
insufficient free resources to hold all transmit requests. 


All requests are placed on the wait queue while in this 
state. State qtx ring is responsible for activating this 
state. 


t ‘ 


ume 6 6™O [h6UMO ll UM OME 
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qtx state machine PROC NEAR 


KKEKKKEKKKKREKEKREREKEREKREREKERKEKREKRKEEKEEKRRERKEKKREREREKEREKEERKEEKKEERKKRKKKEKRKKRKKKKKK 


i 
; qtx idle - transmitter is idle 
PRKRKRRKK KKK RK KEKE KEKE KKK RE KERR KEE RRR KEK KEKE KERR KEK KER KK KEKE ER KERKEKREKRKEKEKKKKKEKK 


. PUBLIC net586 qtx idle 7 symbol for publication 
net586 qtx_idle: 


qtx_idle: 


Get the first free CBL. The state assures that all CBLs are currently 
free. 


mov bx,p_ lst free chbhl 7 get the cbhl pointer 
; Store pointer to user’s transmit packet structure TPS in the CBL. 


mov [bx].CBL_TPS_OFF,si ; Save pointer to TPS 
mov [bx].CBL_ TPS SEL,es 


; Clear the TPS status field, and pick up the link fields. 


mov es:(si].TPS STATUS,0 ; clear the status 

mov ax,es:[si].TPS LAST TBS 7 get the last TBS offset 
mov last _ tbs off,ax ; store it 

mov ax,es:(si].TPS LAST TBS+2 7 get the last TBS selector 
mov last_tbs_ sel,ax 

les si,DWORD PTR es:[si].TPS 1ST TBS ; get pointer to first TBS 


; Get pointer to first TBD. 
mov di,p_1lst_free tbd ; grab the first tbd 


; Setup the CBL. 


mov {bx].CBL_STATUS,0 ; clear the status 
mov {bx].CBL_COMMAND,CBL_ CMD XMIT+CBL EL BIT+CBL I BIT 
mov {bx].CBL_ TBD OFFSET,di 7 pointer to first TBD 


; Fill in the tbd. 


push bx 7 save the cbl pointer 
qtxi_build_thbds: ; build the tbds 

Mov ax,es:(si]).TBS SIZE ; read the size from the TBS 

mov {di).TBD STATUS, ax ; store the size in the TBD 

mov dx,es:(si].TBS BUFFER_PTR 7 get the buffer offset 

mov bx,es:[(si].TBS BUFFER_PTR+2 + get the buffer selector 


call map _ 586 state call the mapper 


me 


store the address.. 


=e 


mov [di].TBD_ADDR_LO,dx 


The Reason joao thes nea fie was based O77 
the observation that wheyevefr fpe SE Ire ae 
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command | 
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v 


This is the last tbs. 


or 
jmp 


qtxi_next_tbs: 


les 


cmp 
je 


mov 
jmp 


{di].TBD ADDR_HI,bx 


si,last_ tbs off 
qtxi_next tbs 
ax,es 

ax, last_tbs_sel 
qtxi_next tbs 


(di]).TBD_STATUS,TBD_EOF BIT 
qtxi_tbds done 


si,DWORD PTR es:{si].TBS LINK 


di,p_last_ free thd 
qtxi_too many frags 


di,[di].TBD LINK 
qtxi build thds 


qtxi_too_ many frags: 


pop 


mov 
jmp 


qtxi_tbds done: 


TL iL i iL i i i i i i i nL} 


pop 


bx 


WORD PTR [bp+STACK_AX],NET_FRAG ERROR ; 


net586 qtx_return 


bx 


=e 6M =e me me 


Set the end of frame bit 


me =e me 6% =e =e 


me | 6™O 


=e 


e 
‘ 


v 


« 


f 


--in the tbd 

check for last tbs? 
not last, do another 
copy selector to ax 
check selector too 
not last, do another 


in the TBD and continue on. 


set the end of frame bit 
continue on 


advance to the next tbs 
point es:si to new tbs 


is this the last thd? 
yes, too many fragments 


follow the link 
keep looping 


cleanup and return error 
restore cbl pointer 


set the return value 
return 


restore the cbl pointer 


LOUS mee € 


although this is perceived as fix for the real cause of the problem, 
and it did elongate the up time (without timeout), it inavitably 
introduces, or unvails, new and fetal bug(s) which will crash both 
the transmit and receive in about 20 minutes with 80% net traffic 


push 
public patch 
patch: 

mov 
txs wait cmd: 

cmp 

je 

Loop 


txs_cmd_clear: 
pop 


END NEW FIX 


Setup the SCB 


mov 
mov 


CX 


ex,O0ffffh 
scb.SCB_ COMMAND, 0 


txs_cmd_clear 
txs_wait_cmd 


Cx 


and get the 586 started. 


scb.SCB CBL_ OFFSET, bx 


° 
v 


° 
‘ 
e 
‘ 


i 
scb.SCB_COMMAND,SCB CUC_START jj; 


long timeout 


command clear? 
yes 


pass cbl pointer 
start the command unit 


CHANNEL ATTENTION 7 alert the 586 


mov tx_time_count,0 ; clear the timeout counter 
mov tx_ timeout enable,Offffh 3 enable the timeout 


; Set new states. 


mov qtx_ state,OFFSET qtx ring 7 in queueing to ring state 
mov cx_state,OFFSET cx transmitting ; transmit is pending 

mov cna_state,OFFSET cna_none queued ; nothing more queued 

mov ax, [bx].CBL_LINK ; advance pointer to next 
mov p_ist_free cbl,ax ; currently free 

mov p_last_rdy_ cbl,OFFSET p_ last _rdy_ cbl ; mark none ready 


; Assuming there was more than one cbl, the last one couldn’t have been used. 
mov p_ist_586 cbl,bx + now belongs to the 586 


; Adjust tbd pointer. 


mov ax, [di}].TBD LINK 7 advance the pointer 
mov p_ist_ free tbd,ax 7; store it 
; Gi pointing to last used tbd 
cmp di,p last free tbd 7; was last tbd used? 
jne qtxi_return 7 no, return 
mov p_ist_free tbhd,OFFSET p ist free tbd ; mark point no good 


qtxi_ return: 


mov WORD PTR [bp+STACK_AX],0 3; set return status 
jmp net586_qtx_ return 


p RRR KKK KKK KKK KKK KKK KKK KKK KKK KKK KEKE KKK KKK EE KKK KEKE KEKE K KEKE KERR KEKEKEKKKKEKKKKEKKEK 


; qtx_ring - queueing to CBL and TBD rings 
ZF RRKKKKKEKKEK KKK KKK KEKE KKK KKK KEKE KER KERR EKER RE KK KK RKKEEREREREKRERKEKKEKEKEKRKEKKKKKE 


PUBLIC net586 gtx ring + symbol for publication 
net586 qtx_ ring: 


qtx_ring: 


; Get the first free CBL if there is a free one. 


mov bx,p_lst_free_cbl 7 get the cbl pointer 
cmp bx,OFFSET p ist free cbl ; points to self if no more 
jne qtxr_got_cbl 7 got a cbl, continue 
jmp qtxr_ wait 7 no cbhl, put on wait queue 


; Store pointer to user’s transmit packet structure TPS in the CBL. 


gtxr_got_cbl: 


push bx + save the cbl pointer 
mov [bx].CBL_ TPS OFF,si 7 Save pointer to TPS 
mov [bx].CBL_TPS SEL,es 


; Clear the TPS status field, and pick up the link fields. 


es:(si].TPS STATUS,0 
ax,es:(si].TPS LAST TBS 

last_tbs off,ax 
ax,es:(si].TPS_ LAST TBS+2 
last _ tbs sel,ax 

si,DWORD PTR es:[si].TPS_1ST_TBS 


me 6 ™e 06M 6M 


Get pointer to first TBD. 


mov 
cmp 
je 


Setup the 
mov 


mov 
mov 


CBL. 


qtxr_build_tbds: 


° 
J 


mov 
mov 
mov 
mov 


call 


mov 
mov 


cmp 
jne 
mov 
cmp 
jne- 


di,p_ lst free thd : 
di,OFFSET p_ ist free thd ; 
qtxr_tbd_ shortage ; 


[bx].CBL_ STATUS,0 ; 


clear the status 

get the last TBS offset 
store it 

get the last TBS selector 


get pointer to first TBS 


grab the first tbd 
is there one? 


clear the status 


[bx].CBL_COMMAND,CBL_CMD XMIT+CBL_I BIT ; may not be last cbl 


[bx].CBL_TBD_OFFSET,di i 


ax,es:(si].TBS SIZE 
[di].TBD STATUS, ax 
dx,es:[si].TBS BUFFER PTR 
bx,es:[si].TBS BUFFER_PTR+2 


a i ia Sl) 


map _ 586 state 


=e 


[di].TBD_ADDR_LO,dx 
[di].TBD ADDR_HI,bx 


me 68 


si,last tbs off 
qtxr_ next tbs 
ax,es 
ax,last_tbs_sel 
qtxr_ next tbs 


bl i, Se en, BL) 


This is the last tbs. Set the end of frame bit 


or 
jmp 


qtxr_next_tbs: 


qtxr_tbd_shortage: 


les 


cmp 
je 


mov 
jmp 


pop 


les 


qtxr wait: 


[di].TBD_STATUS,TBD_ EOF BIT 
qtxr_tbds done 


me 6m 


me | 6™Ne 


si,DWORD PTR es:(si}.TBS LINK 


di,p last free tbd 
qtxr_tbd_shortage 


me 6 


di,(di].TBD LINK 
qtxr_build_thds 


=e 6M 


me 


bx 


me 


si,DWORD PTR [bx].CBL TPS OFF 


=e 


me 


pointer to first TBD 

build the tbds 

read the size from the TBS 
store the size in the TBD 
get the buffer offset 

get the buffer selector 
call the mapper 


store the address... 
-e-in the thd 


check for last tbs? 
not last, do another 
copy selector to ax 
check selector too 
not last, do another 


in the TBD and continue on. 


set the end of frame bit 
continue on 


advance to the next tbs 
point es:si to new tbs 


is this the last thd? 
yes, thd shortage 


follow the link 
keep looping 


out of tbhds, cleanup 
restore cbl pointer 
get pointer back to tps 


put request on wait queue 


mov _ p_ist_tx_wait,si 


me 


put request on wait queue 


mov ' p_lst_tx_wait+2,es 
mov p_last tx_wait,si ; it is the only one 
mov p_last_tx_wait+2,es 


; Set new states. 


mov es:(si).TPS STATUS,0O ; clear the tps status 

mov qtx_state,OFFSET qtx wait ; put queuer into wait mode 
mov pwq_state,OFFSET pwq wait ; transmits in wait queue 
mov WORD PTR [bp+STACK_AX],0 3; set the return value 

jmp net586 qtx return ; return 


qtxr_tbds done: 
pop bx 


; Set new states. 
mov cna_state,OFFSET cna_ring 


; Adjust pointers. 


=e 


restore the cbl pointer 


transmits waiting in ring 


mov ax, [bx].CBL LINK ; advance pointer to next 
mov p_ist_ free cbl,ax 

cmp p_last_rdy_cbl,OFFSET p last _rdy cbl ; any ready now? 

jne qtxr_cbls rdy * yes, some are ready 

mov p_lst_rdy_ cbl,bx ; this is first one ready 


qtxr _cbls rdy: 
mov p_last_rdy_ cbl,bx 


; Check to see if last cbl was used. 


cmp ax,p lst 586 cbl + last cbl used? 
jne qtxr_chck thd ; no, check thds 
mov p_ist_ free _cbl,OFFSET p 1st free cbl ; all used, invalidate pointer 


qtxr_chck thd: 


; Adjust thd pointer. 


a 


one just done is now ready 


mov ax, [di]).TBD LINK 7 advance the pointer 

mov p_lst_free_ tbd,ax ; store it 

cmp di,p_last_ free thd 7 was last thd used? 

jne qtxr_ return 7; no, return 

mov p_ist_ free tbhd,OFFSET p ist_free thd ; mark point no good 


gtxr_ return: 


mov WORD PTR [bp+STACK_Ax],0 
jmp net586 qtx_return 


U 


set return status 


CKEKEKKKKEKEKKKEEKKEKEKRKRKEKREREEERKEREREEREKREKKKREREERREREKREKREKEKEREERREKEEKREKKKRKKREKRE 


‘ 
; qtx_wait - queueing to transmit resource wait queue 
PRRRKRKKRKKKEKEKE KKK KKK KKK KK EEK ERE K KKK KEK KEKE KK KEE RE EEK KEK KEK KKK KKKKKKKKKKKKEKEK 


PUBLIC net586 qtx wait 7 symbol for publication 


> 


net586 gtx wait: 
qtx wait: 


; Put the request at the end of the wait queue. 


mov bx,p last _tx wait ; pick up last pointer 
mov ax,p_last_tx_wait+2 

mov p_last_tx_wait,si 7 update pointer 

mov p_last_tx_wait+2,es 


; Make the last one on the queue point to the new one. 


mov cx,es ; copy new selector 
mov es,ax + load selector last on queue 
mov es:(bx].TPS QUEUE,si ; set offset 
mov es: [bx].TPS QUEUE+2,cx 7; set selector 
mov WORD PTR [bp+STACK_AX],0 7; set return status 
jmp net586 qtx return 
qtx state machine ENDP 


KRKKEKKEKKKEREKEKKEERKRKEREKEEKKERKEKRRREKEKRKRKEREKEEKKREKREKEREKREREKREEREREKREEEEEKRRKRRKEKREKRKRKEKE 


Command (Transmit) Not Active state machine - cna_???? 


This state machine is made up of 3 states. 
1. cna_idle - transmitter is currently idle. 


Does nothing. This is the initial state. This state is 
activated by cna_none_ queued. 


2. cna_none queued - transmitter is active, nothing waiting in ring 
Switches states to cna_idle and qtx_idle when the 82586 
finishes the last transmit requeust. This state is activated 
by qtx_idle and cna_ring. 

3. cna_ring - transmitter active, transmits waiting in ring 
Starts 82586 transmitting next set of transmits when previous 


set has finished. This state is activated by qtx_ring and 
pwq_ wait. 


me me =e me ne me =e me =e me =e me =e me me ~e me me =e =e me me me 


KREEKKKEKEKEKEKEKRKKEKEKKKEKR KEK EKEKKEKKEREEREKREKEEKREKREEEKRREKEREEKREKREKEKEKREKREKREKKKEKKEKSE 


cna_state_ machine PROC NEAR 


KKKKKKEKKEKEKKKEKKEEKKKKKKKREEKREEKREKRKEEKEKREKKERKKKEKEKKKEKKEKREKKEKRKKEKEKKKEKKKRKAKKKRKKKRKKEK 


i 
; cna idle - transmitter is idle 
PR RHR HKKEKKKKKEK KK KKK KK EK KK KHER KKK KEK EKER KERR REE KEKE KKK RE KK ERE KKK EE RKEKKEKEKEKEKKEKKEKK 


cna_idle EQU net586 cna return + idle is a do nothing state 


KKEKKKEKEKKEKKKEKKEEREKREREKEKREREKERKEE RE R ERK REKKEREKRKEKKEREREREREKKEREKKKKKKKKKKKKKEK 


cna_none queued - transmit pending but nothing new queued 
KRKKKKKERKKEKREKRERERKEEEKEKREKEEKEKEKEKERERKEKEKRREKEKEKKKKERKEKEKEKEKKKKKKEKKEKKKKEKKEK 


=e 6M MO 


PUBLIC’ net586 cna_none_ queued 
net586 cna_none queued: 


symbol for publication 


me 


cna_none queued: 


; Set new states and return. 


mov cna_state,OFFSET cna_idle 7 nothing pending 
mov qtx_state,OFFSET qtx idle + queuer to idle state 
jmp net586 cna return ; return 


KREKEKKEKKEKKREKEKEKRKEKKEEEKEKEEEKRREEEKRKEEKKER EKER KEREREKEKRKEKREKEKEREREKKKKKERKRKEKKKRKKKEKKE 


i 
; cna_ring - transmit pending, more queued to transmit ring, none waiting 
PRR RRR RR K KKK KKK KEK EHH KKK KK KK KKK EK RRR KKK ERE KKK KKK KEKE RE KKK ERK EK KKK KEKRKEK KK KKKEKKK 


PUBLIC net586 cna ring 
net586 cna_ring: 


symbol for publication 


me 


cna_ring: 


MOV bx,p_last_rdy cbl + get pointer to last ready 


; Set EL bit in last CBL. 
or {bx ].CBL_COMMAND,CBL EL BIT 3; mark the end 


; Setup the cbl link in the SCB and add start to the new SCB command. 


mov ax,p lst _rdy_ cbl 7 get first ready cbl 

mov scb.SCB_CBL_ OFFSET, ax + pass cbl pointer 

or new_scb_command,SCB_ CUC_START ; start command 

mov tx time _count,0 ; clear timeout counter 
mov tx_timeout_enable,Offffh 7; enable transmit timeout 


; Set cx state to transmitting. 


mMOv cx state,OFFSET cx transmitting ; transmitter is running 
mov ax, [bx].CBL LINK * next cbl 

cmp ax,p_ ist _rdy cbl ; full circle? 

je cnar_none_ free ; no free buffers 

mov p_lst free cbl,ax ; assume it is free 

cmp ax,p_lst_586 cbl ; does 586 own it? 

jne cnar free set 7 no, continue 


cnar_none free: 
mov p_ist_free _cbl,OFFSET p 1st free _cbl ; none free 


cnar_ free set: 
; Update list pointers. 


mov p_lst_rdy _cbl,OFFSET p lst _rdy cbl ; invalidate ready pointers 
mov p_last_rdy_cbl,OFFSET p last rdy cbl 


; Check to see if state has anything is waiting. 


cmp _ pwq_state,OFFSET pwq wait j anything waiting? 


je , cnar_state_ set 7 yes, don’t change state 
mov * cna_state,OFFSET cna_none_queued ; no more queued 


cnar_state_ set: 
jmp net586 cna _return 


cna_state machine ENDP 


KKKKEKKKEKKKKEEKEEKEEEKEREKREKEEKEKREEKRKEEREKREEREREEREKEKEKREEKEKRKREKKERERKEKKEKRKKKKRKK 


Process Wait Queue state machine - pwq_???? 


This state machine is run on the transmit complete interrupt after the 

cx (transmit complete) state machine has been run. It is designed to pull 
waiting transmits in off of the wait queue and get them into the transmit 
ring as resources become available (transmits complete). 


1. pwq_idle - no transmit requests are on the wait queue. 


Nothing is done. This is the initial state. This state 
is activated by state pwq wait. 


2. pwq_ wait - transmits are waiting in the wait queue. 
Transmit requests are transferred from the wait queue to the 


transmit ring as ring resources become available. This 
state activated by qtx_ring. 
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KRKKKKEKEKKEKKEKRKKEKKEKEKRKREKRKREREKEKERKRERERKKRERRRRREKRRREKRERKEEEEREKEREREKREEKRKEKRKEKRKKRKEKEK 


pwq_state machine PROC NEAR 


BEKKKKKEKKEKKEKERREEEKEKEREKKEKKEKREKREKR ERR KERR RRR KKEKEKEKKEKREKEKKEEKEKKKKKKEKEKKEKKEKEKEE 


pwq_idle - nothing is in the wait queue 
KREKKKEKRKREKREKEKEKREKREKKEKEREKREKEREKEREEKKREKKRREKKEKKKRREKKKEREKKERKEKKKKKKKKKRKKKKKRKKRKKKKE 


Tt i! iT 


pwq_ idle EQU net586 pwq return 7 do nothing state 


BRREKEKEKEKEKEKRKRKERKKREKRKEREKKEREKKEKEKRKERKEEKEKREREREEREREKRKKKEEEKEEKEREKRKREKEKEKKEKEKKKKKKKKKRKKKEKK 


pwq wait - transmits waiting on wait queue 
KKKKKEKEKKEKEKKKEKKEKEKEKEKKEREKEKKEKRKEKKERKEKRKKEKKEKEEKEKKREKREKEREKEKEKREKREKKEKEKEKKKEKKEKE 


me 6™e 6M 


PUBLIC net586 pwq wait 7 symbol for publication 
net586 pwq wait: 


pwq_ wait: 


; Get a CBL. 


mov bx,p_ist_free_cbl + get first free CBL 

cmp bx,OFFSET p_ list_free cbl # are any free? 

jne pwqw_get_waiter 7 yes, got one 

jmp pwqw_waitl 7 no, still resource waiting 


=e 


pwqw_get_waiter: get first waiting packet 


les si,DWORD PTR p 1st tx wait load pointer 


me 


If no CBL’s are currently ready, set the pointer to the lst ready to 
this one. Use the pointer to the last ready cbl to indicate if this 
has been done. If it doesn’t change when we get through processing 


me 6M OME 


; then there are no ready cbls. 


cmp p_ist_rdy_cbhl,OFFSET p lst _rdy cbhl ; any ready? 


jne pwqw_ queue ring 
mov p_ist_rdy cbl,bx 


e 
a 
° 
f 


yes, don’t change pointer 
set the pointer 


; Attempt to queue the packet to the transmit ring. 


pwqw_ queue ring: 


push bx 


e 
a 


save the cbl pointer 


; Store pointer to user’s transmit packet structure TPS in the CBL. 


mov [bx].CBL TPS OFF,si 
mov [bx].CBL_TPS SEL,es 


; Pick up the TPS link fields. 


mov ax,es:[si].TPS LAST TBS 

mov last_tbs off,ax 

mov ax,es:(si].TPS LAST TBS+2 

mov last_tbs sel,ax 

les si,DWORD PTR es:(si].TPS_1ST TBS 
mov fragment_count,1 


; Get pointer to first TBD. 


mov di,p_ist_free tbd 
cmp di,OFFSET p 1lst_free thd 
je pwqw_tbd_ shortage 


; Setup the CBL. 


e 


f 
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‘ 


save pointer to TPS 


get the last TBS offset 
store it 
get the last TBS selector 


; get pointer to first TBS 


keep count of fragments 


grab the first thd 
is there one? 


mov {bx].CBL STATUS,0O ; Clear the status 
mov {bx].CBL COMMAND,CBL CMD XMIT+CBL I BIT ; may not be last cbl 
mov {bx].CBL_ TBD OFFSET,di ; pointer to first TBD 


pwqw_build tbds: 


mov ax,es:[si].TBS SIZE 

mov [di]).TBD STATUS, ax 

mov dx,es:[si].TBS BUFFER_PTR 
mov bx,es:{si}).TBS BUFFER_PTR+2 


call map 586 state 


mov [di].TBD_ADDR_LO,dx 
mov {[di].TBD_ADDR HI,bx 
cmp si,last_tbs off 

jne pwqw_next tbs 

mov ax,es 

cmp ax,last_tbs_ sel 

jne pwqw_next tbs 


=e 


=e 6 6™e 6S MO 


me 


me 6 


a i i i SL 


; This is the last tbs. Set the end of frame bit 


or ([di].TBD_STATUS,TBD EOF BIT 


build the tbds 


read the size from the TBS 
store the size in the TBD 
get the buffer offset 

get the buffer selector 


call the mapper 


store the address.. 
--in the thd 


check for last tbs? 
not last, do another 
copy selector to ax 
check selector too 
not last, do another 


in the TBD and continue on. 


set the end of frame bit 


Z0P 


pwqw_next tbs: 


les 
inc 


cmp 
je 


mov 
jmp 


» 


pwqw_tbhds done 


si,DWORD PTR es:(si].TBS LINK 
fragment count 


di,p_last free thd 
pwqw_tbd_ shortage 


di,(di].TBD LINK 
pwqw_build_ tbds 


pwqw_tbd_ shortage: 


pwqw_tbds done: 


° 


! 


pwqw_chck next: 


« 


v 


° 
f 
° 
f 


pop 
les 
cmp 
jbe 
jmp 


POp 
mov 


bx 
Si,DWORD PTR {[bx].CBL_ TPS OFF 
fragment _count,NET586_N TBD 


pwqw_wait 
pwqw_fragment_error 


bx 
p_last_rdy_ cbl,bx 


Adjust lst tbd pointer. 


mov 
mov 


cmp 
jne 
mov 


Pickup the pointer to the TPS out of the CBL. 


mov 
mov 


ax, (di].TBD LINK 
p_ist_free tbd,ax 


di,p_last free thd 
pwqw_chck_next 


p_ist_free tbd,OFFSET p 1st free thd ; 


ax,[(bx].CBL_ TPS SEL 
si,({bx].CBL TPS OFF 


See if another packet is on the wait queue. 
offset with end of queue marker. 


cmp 
je 
jmp 


si,p_last_tx_wait 
pwqw_chk_ selector 
pwqw_do_another 


pwqw_chk_selector: 


pwqw_do_ another: 


° 


f 


cmp 
je 


ax,p_last_tx_wait+2 
pwqw_queue_ empty 


Pick up the next queued item. 


mov 


es,ax 


continue on 


me 


advance to the next tbs 
es:si now points to new tbs 


=e 6 


got another fragment 


=e 


is this the last tbd? 
yes, tbhd shortage 


=e 6M 


follow the link 
keep looping 


=e 6S 


; out of tbhds, cleanup 


restore cbhl pointer 


=e 


get pointer back to tps 


me 


more fragments than TBDs? 
no 
some still waiting 


me 6M 6M 


restore the cbl pointer 
CBL just done is now ready 


me 60 


advance the pointer 
store it 


ue 6M 


was last thd used? 
no 


=e 6M 


mark point no good 


selector 
offset 


e 
v 
e 
tf 


Must compare both selector and 


was this last? 
maybe, keep checking 
no, ago another 


me 6™e 6M 


was this last? 
yes 


=e 6 


load the selector 


=e 


get new pointer 


=e 


les . si,DWORD PTR es:(si].TPS QUEUE 


; Get another CBL. 


mov bx, [bx].CBL_LINK ; advance pointer 
mov p_lst_free cbl,bx 3; assume it is free 
cmp bx,p_lst_ 586 cbl ; 586 own this one? 
je pwqw_cbls out 7 yes, out of cbls 
jmp pwqw_ queue ring 7; no, queue to ring 
pwqw_cbls out: 7 ran out of cbls 
mov p_ist_ free _cbl,OFFSET p lst free cbl ; invalidate pointer 
pwqw_wait: ; leave request on wait queue 
mov p_ist_tx_wait,si ; leave request on wait queue 
mov p_lst_tx_wait+2,es 


pwqw_waitl: 


; States don’t change. Check to see if any CBLS are ready. No CBLs are 
; ready if the last ready pointer points to itself. 


cmp p_last_rdy_cbl,OFFSET p last _rdy cbhl ; any ready? 

jne pwqw_some_rdy 7 yes 

mov p_ist_rdy_ cbl1,OFFSET p 1st rdy_ cbl ; no, invalidate pointer 
jmp net586 pwq_ return 


pwqw_some_rdy: 


mov cna_state,OFFSET cna_ring 3 transmits waiting in ring 
jmp net586 pwq return 7 all done, return 
pwqw_queue empty: ; wait queue is now empty 


; No more are waiting. Set new states. 


mov pwq_state,OFFSET pwq idle 7; no more queued 

mov qtx_state,OFFSET gqtx_ring + queue new stuff to the ring 
mov cna_state,OFFSET cna_ring ; request waiting in ring 

mov ax, [bx).CBL LINK 7; next cbl 

mov p_lst_ free cbl,ax ; assume it is free 

cmp ax,p_lst 586 cbl 7 does 586 own it? 

jne pwqw_ptrs set 7 no, continue 

mov p_ist_free_cbl,OFFSET p lst_free cbl ; none free 


pwqw_ptrs_ set: 
jmp net586_ pwq return 7 all done, return 


pwqw_fragment_error: 


A transmit request has been found that has more fragments than there are 
tbds. This should never happend since the driver should be configured 
with lots of tbds. But, if it did happen it would lock up the transmitter. 
Any packets that come through here are pushed back up to the user with an 
error so that the transmitter can continue on. This code can’t be entered 
before all preceeding transmits have completed since the fragment counter 
can never exceed the count of tbhd’s unless all tbds are free. This will 


a i i a i ie iL 


; insure that the user gets the packet back in 
; requests. 


mov 

push si 

push es 

EXECUTE 1 APNDG 11 appendage 
pop es 

pop si 

cmp ax,0 

je pwqw_skip_app 

push si 

push es 

EXECUTE 1 APNDG tx_appendage 
pop es 

pop si 


pwqw_skip app: 


es:(si].TPS_STATUS,TPS COMP _BIT+TPS_UNSPEC_ERR ; 


sequence with other transmit 


complete, error 


notify link level 


me 


was packet link levels? 
skip user appendage if so 


=e Se 


notify user 


me 


update pointers... 
-.-incase we start over 


any ready? 


mov ax,es:[(si].TPS QUEUE 7 

mov p_lst_tx wait,ax ; 

mov ax,es:[(Si].TPS QUEUE+2 

mov p_ist_tx_wait+2,ax 

cmp p_last_rdy_cbl,OFFSET p last _rdy cbl ; 
jne pwqw_frag rdy ; yes 
mov p_ist_rdy cbl,OFFSET p list _rdy cbl ; 


pwqw_frag rdy: 
mov ax,es 

; See if another packet is on the wait queue. 

; offset with end of queue marker. If nothing 

; and return. 


cmp si,p_last_ tx wait 
je pwqw_frag selector 
jmp pwq_wait 


pwqw_frag selector: 


cmp ax,p_last_tx_wait+2 
je pwqw_frag exit 
jmp pwq_wait 


pwqw_frag_ exit: 
mov 
jmp 


pwq_state,OFFSET pwq idle 
net586_ pwq_ return 


pwq_ state machine ENDP 


no, invalidate pointer 


7 copy selector to ax 


Must compare both selector and 
is waiting, must set new states 


was this last? 
maybe, keep checking 
no, start over 


at i i | 


was this last? 
yes 


no, start over 


™=e 6M me 


; nothing in queue 


KRAEKEKEKKEEKEKEEKEKREREEKREREKRKEKREREREEEKRRE KEKE ERREKREREKRREKEEEKEREKRERKEKRKEEEKRKKKKKKKE 


i 

; Command (Transmit) Complete state machine —- cx_???? 
; . 

i 


This state machine is made up of 2 states. 


: 1. cx_idle - transmitter is currently idle. 


=e 


Nothing is done in this state. This is the initial state. 
States cx_transmitting and the transmit timeout routine 
activate this state. 


2. cx_transmitting - transmitter is currently transmitting. 


bE it i i, Se ee 


Transmits are passed back to the user as they complete. 
The transmit status is set appropriately. States qtx idle 
and cna _ring are responsible for activating this state. 


KKEKKKKEKEKEKEKEKEEEKEREEEKEKRKEEKREREREREREKEEKREEKREKEREREKKREKEKEKKREKKREREEKRKEKREEKEKKKKKRKEKKE 


=e 6 6™e 06M OO 


cx state machine PROC NEAR 


PRR RR RHR KEK KKK KKK KKK KKK HR KKK KKK KKK KK KKK KKK KKK KKK EKER KEK KR EK KKK RK RRR KER KEK KKK KKK 


; cx idle - transmitter currently idle 
PRRKKKK EKER KKK KKK KKK KK KKK KKK KKK ERK KKK KKK KEKE KEKE KKK KK KEK KERR ERK KEKE KEKKKKKKKEKEKEKE 


cx_idle EQU net586 cx return ; do nothing state 


KKEKKEKEKEKEKEEKKEEKREKREKEEKRKKEKEKRKKREREKREREKERKKEREKRKEKRRKREEKREKKEEREKEKKEEKRERKEKKKRKEKEKE 


i 
; cx_transmitting - transmitter currently active state 
pRRKKRKK KEK KKK KKK KKK KKK KKK KKK KKK KKK KKK KKK EKER KEE KEKE KERR ERR KKK KKKKKKEKREKKKEKKEEKEK 


PUBLIC net586 cx_transmitting ; symbol for publication 
net586 cx transmitting: 


transmitter is transmitting 


=e 


cx_transmitting: 


me 


mov bx,p_ist_ 586 cbl get pointer to cbl 


cxt_check: check the cbl status 


=e 


mov cx, [bx].CBL_STATUS 7; get the status 

test cx,CBL C BIT ; check completion bit 
jnz cxt_return_thbds ; complete, handle it 
jmp ext return ; not complete, exit 


; Free up the tbds. 
ext_return_thbds: 
mov di, {bx].CBL_TBD OFFSET + get pointer to tbd 


; If there were no free tbds then make this into a free thd. 


cmp p_lst_free tbd,OFFSET p lst free tbd ; any free? 
jne cxt_tbd_ loop 7 yes 
mov p_ist_free thd,di ; reset the pointer 


cxt_thbd_loop: 


mov p_last free thd,di ; free this one up 

test (di].TBD_STATUS,TBD_EOF BIT + last one in the chain? 

jnz cxt_tbhds returned 3; all tbds have been returned 
mov di, [di].TBD_LINK ; link to next one 

jmp cxt_tbd_ loop 7 loop until got ‘em all 


ext_tbds_ returned: 


s 


% 
; Determine completion status. 


mov ax,TPS COMP_BIT ; build status in ax 
mov dax,TPS OK _BIT ; @x cleared if error found 
cmp ers check flag,0 ; CRS checking? 
je ext _c2 ; nope 
test ex,CBL_ S10 BIT ; check carrier sense 
jz ext_c2 
or ax,TPS NO CRS BIT ; set no carrier bit 
xor ax, dx ; found an error 
ext_c2: 
cmp sqe_ check flag,0 + SQE checking? 
je cxt_c3 7 no SQE checking 
test cx,CBL_S6_ BIT 3; check SQE bit, should be set 
jnz ext _c3 ; is set, no error 
test cx,Ofh 7 any collisions? 
jnz ext_c3 ; yes, S6 bit meaningless 
or ax,TPS SQE BIT 7 Signal quality error 
xor ax, dx ; found an error 
cxt_c3: 
test cx,CBL OK BIT ; error free completion? 
jnz cxt_c4 3; yes 
mov dx,TPS_UNSPEC_ERR ; assume unspecified error 
test cx,CBL S5 BIT 3; excessive collisions bit 
jz cxt_c4 
or ax,TPS _CLSN_BIT ; set the bit 
xor ax, dx ; found an error 
cxt_c4: 
test cx,CBL S8 BIT ; DMA underrun? 
jz ext_c5 
or ax,TPS UNDER_BIT ; underrun bit 
xor ax, dx 3; found an error 
cxt_c5: 
add generic stats.STS TX_COUNT,1 ; increment transmit count 
adc generic stats.STS TX_COUNT+2,0 
or ax, ax ; or in other bits 
les Si,DWORD PTR [bx].CBL_ TPS OFF 7 get new pointer 
mov es:(si].TPS STATUS,ax ; write the status 


Execute the transmit complete appendage, if one is setup. First, give 
link level a chance at the packet. If the packet was sent by link level, 
it will return 0 in AX. If this is so, the user appendage should not be 
executed. 


a i it iL | 


push bx 7 Save bx 
EXECUTE 1 APNDG 11 appendage 7 execute the appendage 
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pop ., bx ; restore bx 


emp ax,0 ; was this link level’s packet 
je ext skip app ; skip user appendage if so 
push bx 7; Save bx 

EXECUTE 1 APNDG tx_appendage ; execute the appendage 

pop bx ; restore bx 


cxt_skip app: 


; If no cbhl’s are free, this one becomes the lst free one. 


cmp p_ilst_free _cbl,OFFSET p lst free cbl ; any free? 
jne ext advance ptr ; yes 
mov p_ist_ free cbl,bx ; set new free pointer 


cxt_advance ptr: 


mov bx, [bx].CBL_ LINK 7 advance to next cbl 

cmp bx,p_list_free_cbl ; was this the last transmit? 
je cxt_enter idle ; yes, no more are queued 

cmp bx,p_ lst _rdy cbl ; hit the ready list 

je cxt_enter idle 

cmp bx,p_lst_ 586 cbl # gone full circle? 

je ext_enter idle 

jmp ext check ; check if new one is complete 


; Transmitter empty, update state machines. 


cxt_enter idle: 


mov cx_state,OFFSET cx_idle enter idle state 


=e 


mov tx_timeout_enable,0O disable the timeout 


=e 


cxt_return: 


mov tx_time_count,0 ; clear the timeout counter 

mov p_ist_586 cbl,bx + will be first one next time 

jmp net586 cx return ; jump to return location 
cx_state machine ENDP 


BRKKKKKKEKKKKEKEKREKREKEKEREKEKRKEKREERKEKEEKEKEREKREREKKEREKREERKEKERKEEKEREKRRKEKRKEEKKKKKKKKKKKKKKE 


net586_xmit_ timeout —- transmitter timeout handler 


This module just removes a timed-out transmit from the 82586 transmit ring 
and returns it to the user. No attempt is made to revive the 586 if it 
has died. 


wT ney cimiteteiinn, GBS WEE Ch. ors 


PUBLIC net586 xmit_timeout SOS the bacle of previous 


net586 xmit_timeout PROC NEAR 


204 O 
mov cx,Offffh 7 long timeout 


tmout_wait cmd: 
cmp scb.SCB_ COMMAND, 0 ; command clear? 


at iL i, it ee SL ei TY 


je » tmout_cmd_clear 
loop ~ tmout_wait_cmd 


yes 


me 


tmout_cmd_clear: 


restart the transmitter 
bang on the 586 


mov scb.SCB COMMAND,SCB_CUC_START 
CHANNEL ATTENTION 


=e 6M 


mov tx time count, 0 

m tx timeout enable, Offffh 

ret 

mov bx,p_1st_586 cbl 7 get pointer to cbl 


; Free up the tbhds. 


xt_return_tbds: 


! 


mov adi, [{bx].CBL_TBD_ OFFSET 7 get pointer to tbd 


If there were no free tbds then make this first free tbd. 


cmp p_ist_free thd,OFFSET p lst free tbd ; any free? 
jne xt_tbd_loop 7; yes 
mov p_ist_free thd,di ; reset the pointer 


xt_tbd_loop: 


mov p_last_ free tbd,di ; free this one up 

test (di].TBD_STATUS,TBD EOF BIT 7; last one in the chain? 

jnz xt_tbds returned 7; all tbhds have been returned 
mov di, (di].TBD LINK 3; link to next one 

jmp xt_tbd_loop ; loop until got ‘em all 


xt_tbds_ returned: 


=e 


les si,DWORD PTR [bx].CBL TPS OFF + get tps pointer 
mov es:(si].TPS STATUS,TPS COMP BIT+TPS TIMEOUT BIT ; write status 


Execute the transmit complete appendage, if one is setup. First, give 
link level a chance at the packet. If the packet was sent by link level, 
it will return O in AX. If this is'so, the user appendage should not be 
executed. 


push bx 7 Save bx 

EXECUTE _1 APNDG 11 appendage 7; execute the appendage 

pop bx 7; restore bx 

cmp ax,0 ; was this link level’s packet 
je xt_skip app ; skip user appendage if so 
push bx 7; Save bx 

EXECUTE_1 APNDG tx_appendage 7 execute the appendage 

pop bx 3 restore bx 


xt_skip_app: 


° 


f 


If no cbhl’s are free, this one becomes the lst free one. 


cmp p_ist_free_cbl,OFFSET p ist free cbhl ; any free? 
jne xt_advance ptr 7 yes 


mov , 


« 


xt_advance_ ptr: 
Mov 


cmp 
je 


cmp 
je 


cmp 
je 


jmp 


xt_enter idle: 


; Transmitter empty, update state machines. 


p_ist_free_cbl,bx 


bx, [bx].CBL_ LINK 


bx,p_ist_free_cbl 
xt_enter_ idle 


bx,p_list_rdy cbl 
xt_enter idle 


bx,p_lst_586 cbl 
xt_enter_ idle 


xt_return 


public xt_enter idle 


Mov 
mov 


xt_return: 


cx _state,OFFSET cx_idle 


tx_timeout_enable,0O 


mov tx_time_count,0 
mov p_ist_586 cbl,bx 
ret 

net586 xmit_ timeout ENDP 


_TEXT 


ENDS 
END 


=e me 


=e 6m 


=e me 


me 


=e 


me 


=e 6M 


set new free pointer 
advance to next cbl 

was this the last transmit? 
yes, no more are queued 

hit the ready list 


gone full circle? 


return 


enter idle state 


disable the timeout 


clear the timeout counter 
will be first one next time 
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UPDATE NOTE 
NX300 Network Executive 
Release 6.2 


This update note for NX300 Network Executive, Release 6.2 describes 
the features of Release 6.2 and lists the fixes that have been made 
since previous releases. 


If you should have any questions, comments, or suggestions, please 
contact: 


Customer Service Center 
Federal Technology Corporation 
207 South Peyton Street 
Alexandria, VA 22314 
1-800-FON4LAN 


FEEDBACK 


Your feedback on this product is appreciated. An overall 
evaluation form, as well as a problem report form, are included at 
the end of this update note. Please complete the evaluation form 
and return it to Federal Technology Corporation. Please use the 
problem report as necessary. 


DIFFERENCES BETWEEN NX VERSION 5 AND VERSION 6 IN LINK-LEVEL MODE 


The transmit buffering area is now 32 Kbytes. All remaining memory 
is now used for receive buffering. 


NX Version 6 uses approximately 16 Kbytes for internal data area 
and 32 Kbytes for transmit buffering. All remaining memory space 
is available for receive buffering. The maximum memory used in any 
case is limited to 512 Kbytes. Buffers are allocated to hold a 
maximum size packet. For 1518-byte Ethernet pacha’ the 
approximate board buffering capability is as follows: 


Transmit Receive 
Memory Size Buffers Buffers 
128 Kbytes 20 50 
256 Kbytes 20 140 
512 Kbytes 20 310 


Part No. 4230202-01, Rev. B 


The number of multicast addresses is no longer configurable. 
Sixty-four multicast slots are always configured. 


I/O-mapped and memory-mapped host interrupts are no longer 
supported. 


Configuration error codes, fatal error codes, and warning codes 
have been changed. The error codes for the two versions of the 
NX firmware are mutually exclusive. Status codes in link-level 
reply messages remain unchanged. 


The configuration message has been changed. Although the NX 
Version 6 configuration message is compatible with that of 
Version 5, several changes have been made. The following fields 
have become reserved fields in Version 6: . 


Memory Map Size 

= Memory Map 

- NX Movable Block Address 

- Number of Processes 

- Number of Mailboxes 

- Number of Multicast Slots 

- Host-to-EXOS Message Queue Interrupt Value 
- EXOS-to-Host Message Queue Interrupt Value 


Version 6 of the NX firmware ignores these fields. The request 
and reply values of these fields are undefined. 


The following fields have recommended specified values in the NX 
Version 6 configuration. Other nonspecified values are 
supported for compatibility with Version 5 but the use of these 
values is discouraged. Version 6 provides the best performance 
if the specified values are used. 


- EXOS Mode = 0 

- Host Data Format Option = 0101H 

- Host Address Mode = 3 

- Number of Hosts = 1 

For the fields Host-to-EXOS Message Queue Interrupt Type and 
EXOS-to-Host Message Interrupt Type, option 1 (I/O mapped) and 
option 2 (memory mapped) are no longer valid. Option 3 (level 


interrupt) and option 4 (bus-vectored interrupt) have been 
combined into a single option, option 4 (bus hardware 


interrupt). Option 3 is still supported, but its use is not 
recommended. 


* The NET TRANSMIT reply no longer returns the slot number the 
transmit request occurred on. This field in the request/reply 
message is now reserved and always returns a value of zero. 


* The NET TRANSMIT return code 10H is now a general transmit 
error that indicates the transmit was unsuccessful. 


* A new NET TRANSMIT request (request code OFH) has been added. 
This request returns a reply message to the host as soon as 
the data in the host buffer have been copied to the EXOS board. 
With this form of message, the transmit status is not returned 
to the host. Therefore, prerocet on the host must detect 
transmit failures. 


* The network statistics counters no longer stick at their maximum 
value. Instead, they roll over and continue counting. 


* The loopback error bit available to the host in the status oe 
is now a generic warning bit. Any warning, including loopback 
test failure, causes this bit to be set. 


* The debug jumper is now the NX mode jumper. When NX PROMs that 
support both Versions 5 and 6 are used, this jumper selects the 
mode to run in. Installing the jumper causes Version 6 to run. 
Removing the jumper causes Version 5 to run. 


UPGRADING TO NX 6.2 


If you have an EXOS 301, EXOS 302, or EXOS 304 board installed in 
your system, you must replace both EPROMs on the board before you 
can use Release 4.0 of the LAN Service network software. The 
EPROMS you are removing contain Version 5.x of the Network 
Executive (NX) firmware. The EPROMs you are replacing them with 
contain Version 6.2 of NX (NX 6.2) as well as the latest NX 5.x 
firmware for your board (the latter is provided for downward 
compatibility). 


Follow these steps to upgrade to the NX 6.2 EPROM: 
1. Power down your system. 
2. Remove the EXOS board from your system. 


3. Locate the EPROM marked NX300L and make a note of its 
orientation. 


4. Remove the EPROM from the board. 


5. Insert the new EPROM (NX300L 6.2) in the board. Make sure 
it is oriented the same way as the old EPROM. 


10. 


11. 


12. 


Locate the EPROM marked NX300H and make a note of its 
orientation. 


Remove the EPROM from the board. 


Insert the new EPROM (NX300H 6.2) in the board. Make sure 
it is oriented the same way as the old EPROM. 


Jumper the EXOS board for 27256 EPROMs, as follows: 


Board Jumpers 

EXOS 301 J15 1-2 present 

EXOS 302 J15 2-3 present; J16 1-2 present 
EXOS 304 J18 1-2 present; J19 1-2 present 


Insert the NX 6.x select jumper. This jumper selects the 
operation mode of NX. The EXOS board operates in NX 6.x mode 
when the jumper is present and in NX 5.x mode when the jumper 
is absent. | 


Board Jumpers 

EXOS 301 J9 present for NX 6.x mode 
EXOS 302 J9 present for NX 6.x mode 
EXOS 304 J9 present for NX 6.x mode 


Re-insert the EXOS board in the system and reconnect the 
Ethernet cables. 


Power on the system. Ensure that the status LED on the EXOS 
board starts flashing at a steady rate approximately 3 seconds 
after you power on the system. If the status LED remains lit 
constantly, check that you have replaced the NX EPROMs 
properly. 


